Exploitation Summary
EIP tracks 2 public exploits for CVE-2000-0689. PoCs published by n30, teleh0r.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in CGI Script Centers' Account Manager. By sending a POST request to the `amadmin.pl` script with the `setpasswd` parameter, an unauthenticated remote user can set a new administrative password, granting full administrative privileges.
Description
Account Manager LITE does not properly authenticate attempts to change the administrator password, which allows remote attackers to gain privileges for the Account Manager by directly calling the amadmin.pl script with the setpasswd parameter.
Exploits (2)
This exploit demonstrates an authentication bypass vulnerability in CGI Script Centers' Account Manager. By sending a POST request to the `amadmin.pl` script with the `setpasswd` parameter, an unauthenticated remote user can set a new administrative password, granting full administrative privileges.
This exploit changes the administrative password for CGI Script Centers' Account Manager by sending a crafted POST request to the vulnerable endpoint. It leverages an authentication bypass vulnerability to grant full administrative privileges.